Privacy Policy

Leemo ("Leemo", "we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains what we collect when you use the Leemo website, mobile apps, and services (the "Platform"), why we collect it, how we keep it safe, and the choices you have.

We process personal data in accordance with the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka and other applicable laws. Leemo is the controller of the personal data described in this Policy. Our registered office is at 501, 1/1 Thimbirigasyaya Road, Colombo 00500, Sri Lanka.

We collect the following categories of information:

• Account details — your mobile number (used to verify and sign in to your account), name, email address, profile photo, and language preference.
• Location data — pickup, drop-off, and delivery addresses you enter, and your device's precise location while you use location-based features such as booking a ride or tracking a delivery. You can control location permissions in your device settings.
• Booking and order data — details of the rides, courier bookings, food, grocery, shop, and marketplace orders you place, including items, prices, timestamps, routes, and the Partner who fulfilled them.
• Payment data — your Leemo Wallet balance and transaction history, and the payment method you choose. Card details are collected and processed by our licensed payment providers; Leemo receives only a token and the last four digits.
• Communications — messages and call metadata sent through Saloot, and any messages you send to our support team by email, phone, or WhatsApp.
• Marketplace content — listings, photos, descriptions, and reviews you post.
• Device and usage data — device type, operating system, app version, IP address, crash reports, and how you interact with the Platform, collected through cookies and similar technologies.
• Partner data — if you apply to drive, deliver, or list a business, we additionally collect identity documents, vehicle or business registration details, licence information, bank account details for payouts, and background-check results where permitted by law.

We use your personal data to:

• verify your identity and secure your account;
• match you with Partners, calculate fares and fees, and provide, track, and support your rides, deliveries, and orders;
• process payments, manage your Leemo Wallet, and issue refunds;
• let you communicate with Partners and other users through Saloot without exposing your phone number;
• keep everyone safe — detecting fraud, investigating incidents and complaints, and enforcing our Terms of Service;
• improve the Platform, fix bugs, and develop new features;
• send service messages (booking confirmations, receipts, status updates, security alerts);
• with your consent, send promotional offers — you can opt out at any time in the app or via the link in any marketing message;
• comply with legal obligations, including tax, accounting, and requests from regulators or law enforcement.

We rely on the following legal bases: performance of our contract with you (providing the services you request); our legitimate interests (safety, fraud prevention, improving the Platform), balanced against your rights; your consent (marketing, precise location, optional features); and compliance with legal obligations.

We share personal data only where needed to run the Platform:

• Partners — the driver, courier, restaurant, store, or seller fulfilling your request sees the information needed to do so (your first name, pickup and delivery address, order contents, and a masked contact channel via Saloot). Partners never see your full phone number or payment details.
• Other users — in Marketplace, the information you choose to include in a listing is visible to other users.
• Service providers — payment processors, cloud hosting, mapping and navigation, SMS and notification delivery, customer-support tooling, and analytics providers who process data on our behalf under contract.
• Legal and safety — regulators, law enforcement, courts, or emergency services where required by law or where we reasonably believe it is necessary to protect someone's safety or prevent fraud.
• Business transfers — if Leemo is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, subject to this Policy.

We do not sell your personal data to third parties.

Some of our service providers store or process data outside Sri Lanka. Where this happens we put in place contractual safeguards to ensure your data receives a level of protection consistent with this Policy and applicable law.

We keep your personal data for as long as your account is active and as needed to provide the services. After you close your account, we retain limited records (such as transaction history and dispute records) for as long as required by tax, accounting, and other legal obligations — typically up to seven years — and then delete or anonymise them. Saloot messages are retained for a limited period to support safety investigations and are then deleted.

We use technical and organisational measures appropriate to the risk, including encryption in transit, access controls, session security, and regular review of our systems. No system is completely secure, so please keep your device and one-time passcodes safe and tell us immediately if you suspect unauthorised access to your account.

Subject to applicable law, you have the right to:

• access the personal data we hold about you and receive a copy;
• correct inaccurate or incomplete data — much of this you can do yourself from the Profile page;
• request deletion of your data, or close your account;
• object to, or ask us to restrict, certain processing;
• withdraw consent at any time where processing is based on consent, without affecting processing already carried out;
• opt out of marketing messages;
• lodge a complaint with the Data Protection Authority of Sri Lanka if you are unhappy with how we handle your data.

To exercise any of these rights, email hello@leemo.lk. We will respond within the period required by law and may ask you to verify your identity first.

Our website uses strictly necessary cookies to keep you signed in and to remember preferences such as language and theme. With your consent we may also use analytics cookies to understand how the site is used. You can manage cookies through your browser settings; disabling necessary cookies may stop parts of the site from working.

The Platform is not intended for anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this Policy from time to time. The "last updated" date at the top of this page shows when the current version took effect. For material changes we will notify you in the app or by email before they take effect.

For any questions about this Policy or how we handle your personal data, email hello@leemo.lk, call 011 250 6332, message us on WhatsApp at +94 77 792 1762, or write to 501, 1/1 Thimbirigasyaya Road, Colombo 00500, Sri Lanka.